Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/318a26-52f5-4dc1-aa47-af1e2df5bdc3/1/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.mft
File: 1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.mft (raw, json)
Hash identifier: XKmp/tXia8qY2YZa+EZ+qUqaVSLALv/R+pTLCjPttnE=
Subject key identifier: 91:C2:C7:94:75:87:13:4A:08:A1:1D:D2:40:24:B4:EB:FB:96:A5:90
Authority key identifier: D4:18:1D:E1:B3:2B:7C:10:50:D0:B0:CA:6D:64:0D:46:3A:53:52:F4
Certificate issuer: /CN=d4181de1b32b7c1050d0b0ca6d640d463a5352f4
Certificate serial: 019655387EB449B236E91A51609E62FE79CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/318a26-52f5-4dc1-aa47-af1e2df5bdc3/1/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.mft
Manifest number: 0574
Signing time: Sun 20 Apr 2025 22:01:27 +0000
Manifest this update: Sun 20 Apr 2025 22:01:27 +0000
Manifest next update: Mon 21 Apr 2025 22:01:27 +0000
Files and hashes: 1: 1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.crl (hash: tZwefj4t18trKxr2/UOFoOzVwPoYTbTb0eoWfiA1oWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/318a26-52f5-4dc1-aa47-af1e2df5bdc3/1/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/318a26-52f5-4dc1-aa47-af1e2df5bdc3/1/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:7e:b4:49:b2:36:e9:1a:51:60:9e:62:fe:79:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4181de1b32b7c1050d0b0ca6d640d463a5352f4
Validity
Not Before: Apr 20 22:01:27 2025 GMT
Not After : Apr 21 22:01:27 2025 GMT
Subject: CN=91c2c7947587134a08a11dd24024b4ebfb96a590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1c:43:0d:59:2b:f2:3e:40:cc:bd:3e:a2:ea:
a2:64:db:28:f7:b7:18:55:1b:81:21:36:91:8e:aa:
f2:d1:ae:d6:6c:2e:4a:77:28:e1:93:f5:52:ca:4b:
be:30:6a:3f:a0:c2:cf:3d:6c:d8:d6:ea:18:f9:c6:
24:74:72:9e:dc:49:dd:f1:a2:ef:e4:1b:92:e5:ba:
24:b6:d0:1c:0d:29:cf:90:fc:96:a5:4e:15:ed:47:
43:a1:69:f8:2d:dd:f9:49:56:e8:c3:b6:8e:fd:44:
9b:f2:9d:37:d5:e3:fe:93:07:d2:08:12:e2:a0:6f:
81:8a:3b:c6:10:47:01:f0:0c:b0:31:4a:8d:9a:8d:
9d:7f:c8:58:21:9e:ad:57:08:b5:b5:b6:7c:a7:72:
5e:c9:06:74:6a:03:ab:cf:d7:6b:45:5c:81:3f:49:
af:7d:da:8b:14:4e:3c:d1:97:52:e2:95:27:82:b6:
1a:b7:48:61:bd:97:8b:22:ab:47:c5:0f:5a:d5:6f:
6e:53:3a:0b:54:58:b7:64:6b:0d:62:32:ba:19:c0:
55:bc:a3:e8:fd:63:ca:0d:df:70:fd:69:a6:80:31:
14:53:38:ad:7f:d9:8d:32:ec:a2:46:23:4d:82:78:
e6:07:6b:d5:8a:c8:81:d7:be:f2:e4:f9:fb:0b:aa:
45:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:C2:C7:94:75:87:13:4A:08:A1:1D:D2:40:24:B4:EB:FB:96:A5:90
X509v3 Authority Key Identifier:
keyid:D4:18:1D:E1:B3:2B:7C:10:50:D0:B0:CA:6D:64:0D:46:3A:53:52:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/318a26-52f5-4dc1-aa47-af1e2df5bdc3/1/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/318a26-52f5-4dc1-aa47-af1e2df5bdc3/1/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:5d:cb:cc:c7:c3:1e:0b:63:0f:25:49:ea:e2:cb:b1:01:8d:
f4:1b:cf:68:24:cc:3f:6d:c8:b7:a8:94:52:ca:01:1f:07:9e:
3d:35:10:5f:a7:ab:38:21:0b:cc:88:d3:4a:56:81:a8:43:2b:
41:ad:fc:96:cf:c1:8c:13:73:47:8b:38:7a:ab:6d:e3:c9:ad:
cb:90:ea:f9:dd:8c:c1:dd:e1:26:6a:0a:e6:a5:89:b8:7d:ad:
4c:91:f6:f4:df:c7:28:5a:f6:f2:b1:20:9c:69:d9:26:e8:2e:
4e:56:76:5b:6d:65:f5:95:3f:0a:d1:69:c6:00:0d:fa:2b:7c:
90:2c:c5:d6:16:f7:b6:e2:80:04:df:7a:58:4a:bc:d4:d3:a9:
f7:a3:ea:61:b4:ef:4c:eb:26:ae:c3:e0:7b:93:00:3d:23:07:
18:71:7d:64:07:98:61:91:be:44:34:1e:8b:64:89:e1:e0:81:
b9:76:89:e3:b2:9e:1e:e4:9e:bd:ae:dd:2c:43:17:b5:3a:20:
73:ad:1b:27:8f:57:30:f0:4d:d8:c0:ba:20:c1:07:2a:57:46:
7a:89:97:ae:a0:88:bf:10:0b:79:3a:df:f3:55:5e:5e:63:60:
cf:13:3b:54:f6:d0:b4:dc:49:da:ce:ea:9e:e6:fb:6e:c9:ec:
05:0d:38:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:06:42 2025 by rpki-client